CVE-2019-14814

There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.

• CWE-122
• CWE-787

• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.htmlMailing List, Third Party Advisory
• http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.htmlThird Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.htmlThird Party Advisory, VDB Entry
• http://www.openwall.com/lists/oss-security/2019/08/28/1Exploit, Mailing List, Patch, Third Party Advisory
• https://access.redhat.com/errata/RHSA-2020:0174Third Party Advisory
• https://access.redhat.com/errata/RHSA-2020:0328Third Party Advisory
• https://access.redhat.com/errata/RHSA-2020:0339Third Party Advisory
• https://access.redhat.com/security/cve/cve-2019-14814Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14814Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/7caac62ed598a196d6ddf8d9c121e12e082cac3aPatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/09/msg00025.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/03/msg00001.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3RUDQJXRJQVGHCGR4YZWTQ3ECBI7TXH/Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4JZ6AEUKFWBHQAROGMQARJ274PQP2QP/Third Party Advisory
• https://seclists.org/bugtraq/2019/Nov/11Mailing List, Patch, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20191031-0005/Third Party Advisory
• https://usn.ubuntu.com/4157-1/Third Party Advisory
• https://usn.ubuntu.com/4157-2/Third Party Advisory
• https://usn.ubuntu.com/4162-1/Third Party Advisory
• https://usn.ubuntu.com/4162-2/Third Party Advisory
• https://usn.ubuntu.com/4163-1/Third Party Advisory
• https://usn.ubuntu.com/4163-2/Third Party Advisory
• https://www.openwall.com/lists/oss-security/2019/08/28/1Exploit, Mailing List, Patch, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.htmlMailing List, Third Party Advisory
• http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.htmlThird Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.htmlThird Party Advisory, VDB Entry
• http://www.openwall.com/lists/oss-security/2019/08/28/1Exploit, Mailing List, Patch, Third Party Advisory
• https://access.redhat.com/errata/RHSA-2020:0174Third Party Advisory
• https://access.redhat.com/errata/RHSA-2020:0328Third Party Advisory
• https://access.redhat.com/errata/RHSA-2020:0339Third Party Advisory
• https://access.redhat.com/security/cve/cve-2019-14814Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14814Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/7caac62ed598a196d6ddf8d9c121e12e082cac3aPatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/09/msg00025.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/03/msg00001.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3RUDQJXRJQVGHCGR4YZWTQ3ECBI7TXH/Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4JZ6AEUKFWBHQAROGMQARJ274PQP2QP/Third Party Advisory
• https://seclists.org/bugtraq/2019/Nov/11Mailing List, Patch, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20191031-0005/Third Party Advisory
• https://usn.ubuntu.com/4157-1/Third Party Advisory
• https://usn.ubuntu.com/4157-2/Third Party Advisory
• https://usn.ubuntu.com/4162-1/Third Party Advisory
• https://usn.ubuntu.com/4162-2/Third Party Advisory
• https://usn.ubuntu.com/4163-1/Third Party Advisory
• https://usn.ubuntu.com/4163-2/Third Party Advisory
• https://www.openwall.com/lists/oss-security/2019/08/28/1Exploit, Mailing List, Patch, Third Party Advisory

Published

Sep 20, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-14809net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishan…
• CVE-2019-1481An information disclosure vulnerability exists in Windows Me…4.3
• CVE-2019-14810A vulnerability has been found in the implementation of the …5.9
• CVE-2019-14811A flaw was found in, ghostscript versions prior to 9.50, in …7.8
• CVE-2019-14812A flaw was found in all ghostscript versions 9.x before 9.50…7.8
• CVE-2019-14813A flaw was found in ghostscript, versions 9.x before 9.50, i…9.8
• CVE-2019-14815A vulnerability was found in Linux Kernel, where a Heap Over…7.8
• CVE-2019-14816There is heap-based buffer overflow in kernel, all versions …7.8
• CVE-2019-14817A flaw was found in, ghostscript versions prior to 9.50, in …7.8
• CVE-2019-14818A flaw was found in all dpdk version 17.x.x before 17.11.8, …7.5
• CVE-2019-14819A flaw was found during the upgrade of an existing OpenShift…8.8
• CVE-2019-1482Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…